Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-52655— usb: aqc111: check packet for fixup for true limit

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未检查数据包。

AI Predicted 6.5 Difficulty: Easy EPSS 0.27% · P18

Affected Version Matrix 14

VendorProduct Version RangeStatus
Linux Linux 361459cd9642631f048719169da9ef14cbf4a932< 84f2e5b3e70f08fce3cb1ff73414631c5e490204 affected
361459cd9642631f048719169da9ef14cbf4a932< d69581c17608d81824dd497d9a54b6a5b6139975 affected
361459cd9642631f048719169da9ef14cbf4a932< 46412b2fb1f9cc895d6d4036bf24f640b5d86dab affected
361459cd9642631f048719169da9ef14cbf4a932< 82c386d73689a45d5ee8c1290827bce64056dddd affected
361459cd9642631f048719169da9ef14cbf4a932< 2ebf775f0541ae0d474836fa0cf3220e502f8e3e affected
361459cd9642631f048719169da9ef14cbf4a932< ccab434e674ca95d483788b1895a70c21b7f016a affected
5.0 affected
< 5.0 unaffected
… +6 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-52655

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
usb: aqc111: check packet for fixup for true limit
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0 and sizeof(u64) the value passed to skb_trim() as length will wrap around ending up as some very large value. The driver will then proceed to parse the header located at that position, which will either oops or process some random value. The fix is to check against sizeof(u64) rather than 0, which the driver currently does. The issue exists since the introduction of the driver.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未检查数据包。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 361459cd9642631f048719169da9ef14cbf4a932 ~ 84f2e5b3e70f08fce3cb1ff73414631c5e490204 -
Linux Linux 5.0 -

II. Public POCs for CVE-2023-52655

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-52655

请登录查看更多情报信息。

Other References for CVE-2023-52655 (6)

Same Patch Batch · Linux · 2024-05-13 · 6 CVEs total

CVE-2024-27398 8.0 HIGH Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
CVE-2023-52656 7.8 HIGH io_uring: drop any code related to SCM_RIGHTS
CVE-2024-27401 7.8 HIGH firewire: nosy: ensure user_length is taken into account when fetching packet contents
CVE-2024-27400 7.8 HIGH drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2
CVE-2024-27399 Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-52655

No comments yet

Leave a comment